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DETAILED ACTION 

1. This action is amendment received Nov. 19, 2009. Claims 1-4, 6-16 and 18-30 
are pending examination. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-4, 6-16 and 18-30 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Pfwltzner, U.S. Patent No. 7,506,069 in view of Amin et al., U.S. 
Patent No. 6,854,014 (referred to hereafter as Amin). 

As to claim 1 , Pfwltzner teaches a method of providing access to services across 
a computer network, comprising the step of: 

generating an access request by a requesting network access device through 
which an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
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type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 6, Pfwltzner teaches a method according to Claim 1 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 7, Pfwltzner teaches a method according to Claim 1 in which a policy 
is applied to the access request to determine whether access will be allowed, and if so 
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for what services (see col. 14 lines 38-53, identity of user is verified to determine 
whether access is allowed). 

As to claim 8, Pfwltzner teaches a method according to Claim 1 in which network 
resources are provisioned in dependence upon the access request (see col. 14 lines 
38-53). 

As to claim 9, Amin teaches a method according to Claim 1 in which the steps of 
receiving and applying are performed by an access-control server or an Authentication, 
Authorization and Audit (AAA) server (see col. 14 lines 38-53, redirection server 
performs authentication). 

As to claim 10, Pfwltzner teaches a method according to Claim 9 in which the 
access-control server uses the access request to select among multiple services that 
are specified for a particular device (see col. 13 lines 13-45, different versions and 
formats are selected based n the device type and user identity). 

As to claim 1 1 , Pfwltzner teaches a device for providing access to services 
across a computer network, comprising: 

Means for generating an access request by a requesting network access device 
through which an end user device can obtain access to network resources, said access 
request comprising a requesting network access device description "computing 
environment information" and a plurality of service requests indicative of computer 
services "meeting" for which the network device requests provisioning (see col. 10 lines 
36-41 , lines 44-53, end user sends a request to access a meeting using a URL); 
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wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

means for forwarding said access request for authentication and authorization 
(see col. 10 lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is 
hosting the meeting). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Am in teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 13, Pfwltzner teaches a device for providing access to services 
across a computer network a network interface, comprising computer storage medium 
executing code to perform the steps comprising: 
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generating an access request by a requesting network access device through 
which an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
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identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 18, Pfwltzner teaches a device according to Claim 13 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claims 19, Pfwltzner teaches a system for providing access to services 
across a computer network, comprising: 

An access control server "redirector server" being arranged: 

receive an access request by a requesting network access device through which 
an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

apply a policy to the access request to determine whether the access will be 
allowed, and if so for what services (see col. 10 lines 56-col. 1 1 lines 3, the access 
request is forwarded to the server that is hosting the meeting). 
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Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 20, Pfwltzner teaches a device according to Claim19 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 21 , Amin teaches a device according to Claim 19 in which the steps 
of receiving and applying are performed by an access-control server or an 
Authentication, Authorization and Audit (AAA) server (see col. 14 lines 38-53, 
redirection server performs authentication). 

As to claim 22, Pfwltzner teaches a system according to Claim 19 in which the 
access-control server uses the access request to select among multiple services that 
are specified for a particular device (see col. 13 lines 13-45, different versions and 
formats are selected based n the device type and user identity). 
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As to claim 23, Pfwltzner teaches a storage medium executing code to perform 
steps, comprising the step of: 

generating an access request by a requesting network access device through 
which an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
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that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 27, Pfwltzner teaches a medium according to claim 23 wherein the 
requesting access device includes one or more of device type, vendor and version (see 
col. 11 lines 28-37) 

As to claim 28, Pfwltzner teaches a medium according to Claim 23 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 29, Pfwltzner teaches a device according to Claim 11 or 13 
comprising a requesting network access device which controls end user device access 
to a network, and which requests services on behalf of one or more said end users (see 
col. 14 lines 38-53, redirection server performs authentication). 

As to claim 30, Pfwltzner teaches a device according to claim 11 or 13 
comprising a in which said requesting network access device requests services for its 
own use (see col. 14 lines 38-53). 

As to claims 2, 4, 12, 14, 16, 24, 26, Pfwltzner teaches a method, system, 
device and medium of providing access to services across a computer network, 
comprising the step of: generating an access request by a requesting network access 
device through which an end user device can obtain access to network resources, said 
access request comprising a requesting network access device description and a 
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plurality of service requests indicative of computer services for which the network device 
requests provisioning (see col. 9 lines 28-45, col. 4 lines 20-47, col. 10 lines 38-54). 

Pfwltzner does not explicitly teach that the access request is a RADIUS access 
request. Anderson, however, teaches a system and method sending requests for 
accessing a resource wherein the request is a RADIUS request (see col. 10 lines 20- 
31). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of RADIUS requests in Pfwltzner as taught by 
Anderson because doing so would make the method and system more secure. 

As to claims 3, 15, 25, Pfwltzner teaches the service request contains a device 
type and a service request identifier "URL" (see col. 13 lines 13-59, access request 
includes a URL and device information). 

Response to Arguments 
3. Applicant's arguments have been fully considered but are not persuasive. 
Applicant argues in substance that Pfwltzner does not disclose any device description, 
authenticate and authorize the end user device to the computer network. 

In reply, Pfwltzner teaches a system and method accessing a computer resource 
using a URL. The request received includes information to identify the type of device 
that the user is using such as a PDA or laptop. In response to identifying the type of 
device, information is sent and displayed on the client device based on the type of 
device (see col. 1 1 lines 22-38). Since Pfwltzner teaches that the access request 
includes information identifying the type of device for example a PDA or laptop, then 
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Pfwltzner teaches "access device description includes one or more of: a requesting 
network access device vendor, a requesting network access device type, a requesting 
network access device version" as claimed. 

Pfwltzner also teaches sending a request to access a network resource also 
includes identifying user information such as user name to determine whether the user 
is authorized to access the network resource (see col. 14 lines 38-59). Therefore, 
Pfwltzner teaches "authorize the end user device to the computer network" as claimed. 

4. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to HUSSEIN A. EL CHANTI whose telephone number is 
(571)272-3999. The examiner can normally be reached on Mon-Fri 8:30-5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on (571 )272-4001 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for 

published applications may be obtained from either Private PAIR or Public PAIR. 

Status information for unpublished applications is available through Private PAIR only. 

For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 

USPTO Customer Service Representative or access to the automated information 

system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Hussein Elchanti/ 
Patent Examiner 

Feb. 2, 2010 



